FrankChen021 commented on code in PR #19806:
URL: https://github.com/apache/druid/pull/19806#discussion_r3686772862
##########
extensions-contrib/cassandra-storage/pom.xml:
##########
@@ -129,6 +114,10 @@
<groupId>org.slf4j</groupId>
<artifactId>slf4j-log4j12</artifactId>
</exclusion>
+ <exclusion>
+ <groupId>org.yaml</groupId>
+ <artifactId>snakeyaml</artifactId>
+ </exclusion>
Review Comment:
Addressed in b420888823. The XML comment now explains that Cassandra uses
SnakeYAML only for unused server configuration and that excluding it avoids
both the vulnerable transitive artifact and an incompatible major-version
replacement.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
